Overview

overview

7

Static

static

7

a01db11bda...18.exe

windows7-x64

7

a01db11bda...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a01db11bdaa560125440ceabff56016b_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240816-1zvwdstcmj

  • MD5

    a01db11bdaa560125440ceabff56016b

  • SHA1

    1063a30498471e7106b8110fa3b6a061f989a27f

  • SHA256

    a0c5c88277112f79b8e13c88450a38a96676171ca367de49d6e3880ab190a218

  • SHA512

    e05c801a49e33793bd4835a77102b3c054f59fc83cfc70002e4b62c0aa48b027947059b705103561c2767f2780648d9c683426ccefdb45cb091cf1e252f8f13e

  • SSDEEP

    98304:HfBPTu+M5cYE6vtgjnmPPY7WX6PGKhs0btC1RDyBvj:/Bu5cYRvtgjmPP6hS0RyRsb

Score
7/10
discoverypersistencethemida

Malware Config

Targets

    • Target

      a01db11bdaa560125440ceabff56016b_JaffaCakes118

    • Size

      5.0MB

    • MD5

      a01db11bdaa560125440ceabff56016b

    • SHA1

      1063a30498471e7106b8110fa3b6a061f989a27f

    • SHA256

      a0c5c88277112f79b8e13c88450a38a96676171ca367de49d6e3880ab190a218

    • SHA512

      e05c801a49e33793bd4835a77102b3c054f59fc83cfc70002e4b62c0aa48b027947059b705103561c2767f2780648d9c683426ccefdb45cb091cf1e252f8f13e

    • SSDEEP

      98304:HfBPTu+M5cYE6vtgjnmPPY7WX6PGKhs0btC1RDyBvj:/Bu5cYRvtgjmPP6hS0RyRsb

    Score
    7/10
    discoverypersistencethemida

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks